Appl. No. 10/719,981 Page 1 1 of 14 

Amendment. Dated 13 November 2008 

Reply to Office action of June 13, 2008 

Attomey Docket No. 1 0841 7.00081 /RN1 40 

Remarks 

As stated above, Applicants appreciate the Examiner's thorough examination of the 
subject application and request reexamination and reconsideration of the subject application in 
view of the preceding amendments and the following remarks. 

As of the office action of June 13, 2008, claims 1-31 were pending in the subject 
application. With this response applicant has amended claim 11. 

A. 35 U,S,C, § 112 Rejection 

The Examiner has rejected claim 11 under 35 U.S.C. § 112 as indefinite. In particular, 
the Examiner states that "[o]ne of ordinary skill in the art would not understand what is meant by 
[the term] 'intrinsic[.]"' Office Action page 2. 

In response. Applicants have amended claim 11 to remove the term "intrinsic." The 

newly amended claim is listed below for convenience: 

11. (Currently Amended) The method of claim 1, wherein the allotted 
playback duration is determined based upon predetermined rights associated with 
the device. 

As noted, the term "intrinsic" has been removed. The new claim recites, in part, "predetermined 

rights associated with the device." The amendment is supported by the specification. For 

example, paragraph [0020] states that "digital playback devices equipped with intrinsic digital 

content consumption rights are provisioned with rights monitoring logic to influence playback" 

Subject Application f [0020] (emphasis added). As another example, paragraph [0024] states: 

[t]he right representing the allotted playback duration may be intrinsic to the 
playback device, or it may be represented by rights provided to the playback 
device by the content provider or third party as part of a subscription or other 
transactional agreement. 
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Id. at \ [0024], Applicants believe that the newly amended claim, in view of the specification, is 
patentable under § 112. Accordingly, Applicants request withdrawal of the § 112 rejection of 
claim 11. 

B. 35 U.S.C. § 102 Rejections 

The examiner has rejected claims 1-5 and 10-31 under 35 U.S.C. § 102(e) over U.S. 
Patent Application No. 2005/0022019 (filed July 5, 2003) ("Medvinsky"). Applicants do not 
believe that Medvinsky claims each and every element claimed in the subject application. 
Additionally, Applicants respectfully assert that Medvinsky is not prior art under § 102(e) 
because the invention of the subject application pre-dates the Medvinsky^s reference. In support 
of this assertion. Applicants have attached a 37 C.F.R. § 1.131 Affidavit of inventor Joshua Hug 
as Appendix A (the "Hug Affidavit"), and a 37 C.F.R. § 1.131 Affidavit of inventor Bradley 
Hefta-Gaub as Appendix B (the "Hefta-Gaub Affidavit") (collectively, "the affidavits"). 

The affidavits provide evidence that the invention pre-dates the Medvinsky reference. In 
particular, the affidavits provide evidence that conception occurred prior to the Medvinsky filing 
date, and that diligent reduction to practice began prior to the Medvinsky filing date and 
continued, without lapse, through the subject application's filing date. The attached affidavits 
state that "[t]he subject matter claimed in the subject application was conceived prior to July 5, 
2003." Hefta-Gaub Affidavit, \ 4; Hug Affidavit \ 4. The affidavits also include copies of an 
Invention Disclosure Statement that describes the claimed invention and pre-dates the 
Medvinsky reference. See Id. at \ 4-5. 

In addition, the inventors diligently pursued reduction to practice of the claimed 
invention. As stated in the affidavits, the reduction to practice began prior to the Medvinsky 
filing date and continued, without lapse, though the filing date of the subject application. See Id. 
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at ^ 6. The affidavits include emails and attachments that evidence the reduction to practice — the 
emails are dated July 1, 2003 through October 8, 2003. See Id. at \ 6-13. These emails, coupled 
with the filing of the subject application, attest to the diligent reduction to practice of the 
invention which began before the Medvinsky filing and continued, without lapse, through the 
filing date of the subject application. 

The Examiner will note that Exhibit E, attached to this response and referenced in the 
affidavits, contains an email message and two PowerPoint® file attachments ("PPT files"). Each 
page of the PPT files displays the date September 30, 2008. That date is the print-out date of the 
PPT files; it is the day that Applicants* attomey printed the files — it is not the date that the files 
were created. As noted in the affidavits, the PPT files were originally attached to the email 
within Exhibit E, which is dated August 15, 2003. 

Accordingly, Applicants contend that the Medvinsky reference is not prior art under § 
102(e) because, as discussed, the invention of the subject application pre-dates the filing of the 
Medvinsky reference. As such. Applicants believe that Medvinsky cannot provide proper basis 
for the § 102(e) rejections. In light of the evidence presented, Applicants respectfully request 
withdrawal of the § 102(e) rejections. 

C. 35 U.S.C. § 103 Rejections 

The Examiner has rejected claims 6-8 under 35 U.S.C. § 103 over Medvinsky and U.S. 
Patent No. 5,586,264 ("Belknap"), and claim 9 under § 103 over Medvinsky and U.S Patent No. 
5,708,422 ("Blonder"). Claims 6-9 are ultimately dependent upon independent claim 1, which 
was rejected under § 102 over Medvinsky. As discussed above, Applicants contend that claim 1 
is patentable under § 102 because the invention pre-dates the Medvinsky reference. Applicants 
further contend that claims 6-9 are patentable because they are ultimately dependent upon claim 
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1 and incorporate all the elements of claim 1. Accordingly, Applicants respectfully request 
withdrawal of the § 103 rejection of claims 6-9. 
D. Conclusion 

In consideration of the amendments and foregoing discussion, the application is now 
believed to be in condition for allowance. Early allowance of the subject application is 
respectfully solicited. 

This response is not believed to necessitate any additional fees. However, in the event 
that additional fees are due, please charge or credit any refund to our Deposit Account No. 50- 
2324. 



Holland & Knight LLP 
10 St. James Avenue 
Boston, MA 02116-3889 
Telephone 617-305-2143 
Facsimile 617-523-6850 
#5670429_vl 



Respectfully Submitted, 



Dated: 13 November 2008 



/Brian J Colandreo/ 
Brian J Colandreo 
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EXHIBIT A 



REALNETWORKS INVENTION DISCLOSURE FORM 

ATTORNEY^UENT PRimSQED COMMUNICATiON 



DATE: 



It is important to provWe a^icurete and de<aife<3 information on this form, Th« {ruformstion wilt be used to evaluate 
your tnventk)!^ for po&sH^le ftHng a$ d peter)! ^plication end )$ neces^^ary to help us compiete the eppHcetion. 
Wben completed and signed, please mum this form to Llea B&mm, t.ee«^ Pi^rl^ent If you have any 
queatfone, please call Steven Stewart, x64S7. 



1 iDventor: _Hji!SL 



UdiN^me 



Contractor V£S« 



First Name 
F»x# 



Ummt ^-mw Adc^e&s: #iMtt^»al.<it^ 



W>tmM(km9: 1 1fti Qmm AftOft AYft. APT 

Clty^^SSl^. ^ State WA Zip 98100^ 



*Co«pofate Level Division fe^, h/ledia Systerns) J^tejCHa §ygfif?M., 
Supervisor* Rahul Afl^wej Ptene jjOe-gT^-ffgO 



Sub H^Divlslon 



l^iddl« InHiat 



Inventor H^rftft-^*^ 



la$i Kame 



Coirtiaalor: YES_ 



Inventor E-Mair Address: 
HomAddre««: gft^fn Av^r H> 

•Corporate Leve3 DJvtelon {e.g, Me($a Systems) »tofea Syste^ns 
Supervfeor , MflffSn Rtseftyi... Phone 



JL 



, Fax#__ 



State jv^ Zip MM 



Country ..WM.. 



Middle In^tJat 



S«t> 'Oivlslon Cod^ 



^tr you are umun of informtfUm, plttS0 discust with y«Hir in«iia9«r. 
{PROVIDE SAME iNf^ORMAriON A$ ABOVE FOR EACH AOOlTiONAt INVENTOR) 

2 Tito of Iftvention: Mcftod of aKofafina and nsf^ew^ syb^c^^oBon media 



3. Describe the technoio^y/product/process <code nsrne) the inverttlon relates to {be sj>ecific If you osn): 

Portable rmi^lfi A mat^a ^ub&criDtioff devk^&s. ____ — 

4. Iriclude several Nay words (o describe Ihe technology area of the invention in add-on to « 3 above: pRM, Riphts enfeypemer^t. 
ftg!CW:e te3ll^^ri 99xm^ dayi<^, ffffl^ yt^yl^lKWiflft — ^^.^^ 

5 Staa^ of devefopfnanr % compietSc &lm^l8tiion$ done, atphs ooda If any> etc): ktea ftaa bsen documented in slides . 

p9tte has pee^ created nor has this beefi shar&d an ^m^f^ party. 

6. (a) Ha« a descriptien of your Invention been, or it shortly ban publtsned outside of Real Networks? 

NOr X YES: tf V£S, was ^e rnar^uscdpt subffmllad to for pre-publicatiw approvaJ? 



IDENTtFY THE PUBLK:AT10N AND Tm DATE PUStlSHSD (TO 8€ PUBLISHCD): . 



(b> Has your iRventton been u&ed/soJd of planr>ed to be used/sold by Real Neiworiis or others? 

NO: X YES! ______ DATE WAS OR WILL BE SOLD: 



(c) Does this inventiof^ rstate to technology that h or mli be covered by & S1G (specfel interest group)/siandard/ 
or $pedficatk>n? 



NO: YES: ^ Name of StG/S{&rtdard/S|>eciftcetlon: H\m Qm ^^m!9>.PM 

staodawte,,. foot cwtwiByIo i^pooa. but aft^- vy^ dBm<yii^irf |e |fsstim» 8»y wiB juoy a» ovef tWaJ _. 

((t) if th«: invention Is software, actua) or ai^lpated date of any beia t»9t» outatda l^aalNatworkat Ifite gt^nw^yif 
2fiSI 

7. Was lha }nv«Mfon conceived or constructad kt coJtai>or8*jon with anyona other than a RaalNatwofka ampioyae 
or in partormance of a pro{act jnvofvlt^j entKiaa o^«r man RaslNatworka, a.Q. Qovammant. othar companias, 
univaralHaa or consortia? 

NO; >f YES: Kama ol to<»<^itri or an«y; 

8. tstNainvari^reialBdtoanyolherlnyaiitioAiSactot^ ff»o«pfaa«egvattM» 

title amJ invantors oamas: ^to■ 



PLEASE READ AND FOLLOW THE OfRECTIONS ON 
HOW TO WRITE A DESGRiPTION OF YOUK INVENTION 



AtUcfi « fl[««<;rl|»<i<»n of tha invention to this form, DATED AND SIGNED BY AT LEAST ONE 
PERSON WHO IS NOT A NAMED INVENTOR, ami Inelutfe tli» f^liowlini Inlorntatiom 

1. D«scrlb» ift «ltt«li what co«ii|K»R9iit$ of tht Invontioit 4r« »wt how th« Invention 

works. 

2. D«sGrll>» «<tvantage(s} of your invention ov»r what i» <lon9 now. (E.Q. What 

probtams doas it aolva, if arty?) 

3. YOU MUST include at iaaat one figure iiluatrating tha Invention, If the invention 

ratatas to aoftwara, inciuda a flowchart or paaudo*eoda raprasantaflon of the 
algcM'lthm. 

4. Value of your Invantion to RaalNatworka (how wilt or could it b« uaadt). 

Explain how your Invention is novel. If the technology ltta» it oot iiaw» axplain 
what makas It dlH^rant. 

6. Identify the closeat or most i^artinant prior art that you mm awara of from 

RaalNatworfca or anyona alaa. 

7. Who is likely to want to uae this Invention or {nfrlnga Hia patent If one la iMIytalnad 

and how would tnfringamant l>a datactwi? 



*KAVE YOUR SUPERVISOR Ft£AD, DATE AMD SIGN COMPLETED FORM 



DATE: Stra^VISOR: 



SY THIS SK3NING. ( (SUPSRVtSOR^ ACKNOWLEDGE THAT I HAV6 READ AND UNDERSTAND THIS 

i:»sa.osuRE 



1 . Describe In d«Uil what the components of the invention are antl how th« 
lnv<s»ntion worfcs. 

This invention applies the concept of a rechargeabte battery to DSgita! Media 
Expiratton. Expiring content in an accoptaWe manor ts a very hard problam. This 
invention creates a simple yet highly effective s^oiution to this problem. 

There are two prfmary actors Involved in this invention, (a) device (b) digital media 
service (DMS). An optional actor (c) ie a pass through intermediary device (ie a 
Personal computer). 

Linking the actors is a commijnication protocoK These Actors have been linked 
together In prior art* This invention focuses on the goaf of the communication 
protocol these actors communicate through. Prior art has tried to transfer actual 
rights information from a DMS to a device. This has proven, (a) hard to define in a 
secure manor, (b) hard to create devices with the required components {c) 
expensive (d) a complicated user experience. 

This invention removes the need of a OMS to provision rights to a device. Instead, 
a simple recharge command Is ail that needs to be transmitted. Device's will be 
manufactured/upgraded to contain an Intrinsic set of rights they know how to 
enforce. Those rights will never change, and wIM always be enforced when a 
device consumes content. 

Our inverjtion is to create devices wHh set rights already in the devlceSv When 
these rights are used up« the device will require users to recharge their rights. The 
DMS win simply need to generate a refresh token for the device they want to 
recharge* 

ThemostCQOHtiion and maybe the only sat of rights that a device will acknowledge 
wig be piay back time. Again this Is related to the idea of using a battery for digital 
rights exp^riffon. Devices will be created with a pre-determined number of aiiowed 
playback hours. After that time has passed, the devices will refuse to play content 
until they are re-charged. Recharging a device can be a very simple 
straightfonAfard process for an actors involved. 

The foliowing ftow Is imagined: 

- Obtain a new device 

- Register device with a DMS 

- DMS sends a n^charge token to the device 

o Numerous protocols are possible some of which are claims of this 
Invention 

o Any communication medium should be usable: WIFi> WAN, GPRS, 
tan. US8> 1394, SMS, MMS etc. 
^ Freely transfer subscription media to devices, 
o No protocol is required 

o Again any communication medium, examples are: WiFi, WAN, GPRS* 
Lan, USB, 1394, etc. 

- Piay the media consuming the intrinsic rights the device has 



- At some point either automaticaUy or at the users request, the device will be 
issued a refresh token. 

^ If the user refuse to refresh/recharge their devlcdp does not connect their 
device to a DMS, cancels their subscrfption to their DMS, hard re-sets their 
device, etc, The device will refuse to playback the user's subscription 
content. Users wHI understand this because the device will behave as If the 
battery has tw cmi on their device. 

Protocol claims: 

Numerous methods cen be sm^ined to transfer a refresh comrrjand to a device. 
The protocol must ensure it cannot be re-pfayed by a man in the middle. The DMS 
must be able to authenticate the ider>tity of the device. The devk:e must 
authenticate a valid DMS is re-charging/refreshing their rights. 
This could be accomplished via: 

' A shared secrete between the DMS & device 

- A bl-directionai publia'private Ney exchar^e betv^een the DMS & device 

' A one*v/ay pubHc-key/certifscate exchange between the OMS and the device, 
' Or a one-way public-key/certificate exchange between the device and DMS, 

- A symmetric key exchange protocol between the DMS and the device. 

* The protocote above but repSacing the DMS with an intermediary device 0e a 
PC). 

- Any other protocol that fuil-fi»s the requirements listed above. 

2, Describe advantage(s} of your Invention over what is done now, {E.g. 
What probfems does It solve. If any?) 

This invention has numerous advantages over what is done now. 

This Invention greatly reduces the engineering requirements and BOM required to 
create secure subscription devices. Thus in the end towering the-<5ost users wilt 
have to pay for these devices and increasing the profit margin for manufactures of 
subscription devices. Currently the induslry is focused on building secure docks 
(nto secure devices. Some companies have been pushing this for a LONG time but 
the engineering problems have been significant. Solutk>ns have been proposed, 
but they have been slow to become accepted by device manufactures because they 
have required devices to be manufactured mth secure docks. Secure docks have 
been VERY siow to become accepted because of their impact to the BOM. 

This invention simplifies Jife greatjy for users. This is the core advantage. After the 
production and engineering problems are eventually solved which ttiey are dose to 
being solved, an even larger problem looms on the horteon. The focus has been on 
patting a drm on the device Instead of creating a usable device. Users are n ot 
gojnsjo that they have clock restnctions instead of 

usage restrictions on their^ This invention though, uses a 

model thai users undeiitaniir are farnlliaf with and have already accepted. 

3. YOU MUST include at ieast one figure iiluetrating ttie invention. If the 
invention reiates tt> software, include a fiowchait or pseudo»code 

representation of the aigorlthm* 

The foliowing flow is imagined: 

- Obtain a new device 



- Register device with a QMS 

- DMS sends a recharge token to the device 

o Numerous protocols are possible some of which ere claims of this 
Invention 

o Any communicetion medium should be unable; WiFf, WAN, GPRS, 
tan, USB. 1394, SMS, MMS etc. 

- Freely trar^sfer subscnption media to devices. 

o No protocol is required 

o Again arty commuoicatlon medkim^ examples are: WiFi, WAN, GPRS, 
ten, USB, 1394, eta 
Piay the media consuming the intrinsic rights the device has 

- At some point either automatlcatly or at the users request, the device will be 
issued a refresh token. 

^ If the user refuses to refresh/recharge their device, does not conned their 
device to a DMS, cancels their subscription to their DMS, hard re-sets their 
device, etc. The device will refuse to playback the user's subscription 
content. Users wifl understand this because the device will behave as if the 
battery has run out on their device. 



4. Vaiue of your Invention to RealNetworks {how will or could It be used?). 

We wiil use this invention to partner with device manufactures and create tha 
subscription service of the future. We can lock others out of using similar usable 
technology and give our subs<^iptlon services a huge competitive edge, 

5. Explain how your Invention is novel.. If the technology Itseif is not new, 
explain what makes It different. 

No rights are transferred from the DMA to the device. Instead a simple refresh 
message Is transferred and Devices are created in a less general but more single 
purposed format* 

6. Identify the closast or most pertinent prior art that you are aware of from 
RealNetworks or anyone eiee. 

Microsoft's PD protocol. See novelty of our approach for differentiation. Prior work 
vre have done with Portable devices has centered on the idea of transferring rights. 

Sony OMG, again they rely on a clock on their devices to expire content. 

One-way protocols used to b^nd content to a device. No expiration of content is 
done on devices thus these protocols are not useful for subscrtptton services that 
require content to expire at some point in the future. 



Who is likely to want to use this Invention or infrinne the i>atent if one is 

obtained and how would infringement be detected? 

Microsoft, Pressplay, music match, apple. Infringement should be easily 

detectable. 



EXHIBIT B 



Subjectrspec for user license request 
DaterTue, 01 Jul 2003 14:43:28 -0700 
FromrQiang Luo <qluo(a)jeaLcom> 

To:Adam Cappio <adamc@reaLcom> . Sheldon Fu <sfu(a)jealcom> . Josh Hug 
<ihug@reaLcx)m>. Alain Hamel <ahainel@jeaLcom>- Brent Newman 
<bnewman@real.com>. Rahul Agarwal <rahul@real,com> 

when making machineLicense request to the license server, the storefront 
shall format it as a subscription request where 
Subscript ion_SubscriptionGUID=UserGUID. 

There will be one additional parameter, 

Subscript ion_ContentKey=userKey. The userKey is retrieved from the 
licensed user's account. The user key is encrypted with the packager's 
public key. 

I propose that we make Subscription_Title=machineLicense mandatory for all 
machineLicense . 

Sheldon asked me to design a new interface to get a list of all userGUIDs 
that are licensed on the PC. This is required in the Orange protocol. We 
should be able to easily implement this with 

GetAllRecordInfo(RT_SUBSCRIPTION) call then matching each subscription's 
title for "machineLicense". 



Qiang 



EXHIBIT C 



Subject:S0D#2: User Level Licensing 
DateiFri, 11 Jul 2003 15:12:57-0700 
FromrQiang Luo <qluo(5)TeaLcom> 
To; drm-dev{a)jeaLcom 



Attached is the revised SOD for user level licensing model edited by- 
Josh. It is based on the initial version and the follow-up discussions 
that I had with Josh, Sheldon and Adam. 

We are having some ongoing discussions about the design of "license 
insertion acknowledgement" and where and when to insert the embedded 
content license. In fact the designs in this SOD are not finial. All in 
the SOD are subject to discussion, debate and change. 



Qiang 



SOD: User Level Licensing 

11/07/2003 

Version vO.2 

1 Introduction: 

Our current DRM implementation allows content-only licensing and subscription 
licensing. The licensing models have a set of rich features to support very flexible 
content rights control. However, both models require an individual content license for 
every piece of secured DRM contents. This requirement puts heavy burden on the 
license server in generating content licenses. It also incurs heavy client CPU load when 
decrypting and inserting the content licenses into the client's license database. In some 
rare cases, a user with a large collection of contents may somehow end up with a 
corrupted DB due to power failure. To recover, the user must re-license for all his 
contents. 

To facilitate a better user experience and to address the above problems, this SOD details 
the functional design of a user oriented licensing model. In the user model, content is 
personalized to a user; the user's machine is then enabled with the user's credentials 
allowing consumption of the content. 

Under this licensing model, the content is user-bound. A user can license up to N 
machines for his content. When a user is licensed on a machine that license is both user- 
bound and machine-bound, using the same mechanisms of subscription or normal license 
binding. Content bound to user A stored on the machine B will require user A's license 
on Machine B in order to be functional. 

User licensing is an extension of our subscription licensing. A user license is simply a 
subscription license with a key. There are then no sublicenses to govern access to the 
content. Instead the content contains its content key in its file header. The user license's 
rights then act as a single pool of rights for the UserContent's to be accessed via. Users 
are no longer required to individually license individual pieces of media content. 



2 Definition/Terminology 

UserGUID: a 16-byte GUID assigned to a user identifying the user license in this 
licensing model. 

UserName: the user's login name. 

ClientGUID: a 16-byte DRM client permanent ID extracted from Machinelnfo. 
userKey: a 16-byte key assigned to the licensed user to encrypt the ContentKeys. 
userLicense: the license that grants a user to play DRM contents on a machine. 
embeddedContentLicense: the personalized content license in the content file header 
that ties the content to a particular user. 



3 How the user licensing model works 



When a user signs up for the service, the store account manager will assign the licensed 
user a UserGUID and a userKey and save them together with the normal user account 
information into the account DB. The userKey shall be encrypted with the packager's 
client public key. 

When a user initiates content download, the storefront will first lookup the UserGUID 
and the userKey from the user's account record. The storefront will then retrieve the 
ContentKey using the ContentGUID in the usual way. The storefront makes a request to 
the license server for an embeddedContentLicense and sends both the content and the 
license to the client. The download manager on the client side will be responsible to 
insert the embeddedContentLicense into the content file header. 

On playing back, the DRM client checks the content file header for the existence of the 
embeddedContentLicense. If present, the DRM shall use the UserGUID to lookup the 
user's user License. The rights in the user license are used in the playing back. The 
ContentKey is obtained by decrypting the embeddedContentLicense with the userKey. If 
no user license is found the client will fall back to try and find a normal license based on 
ContentGUID in the file. 

If there is still no license on the machine for the file, the DRM client will hurl to the 
storefront to request a license in the normal manor with one exception. The difference is 
an additional &UserGUID=xxxx will be tacked onto the request. (This is the same 
method an expired subscription would have a &SubscriptionGUID=xxx tacked onto the 
request.) The storefront can use the userGUID to identify who purchased the content. 

The store will be required to maintain a list of registered unique 
ClientGUIDs/Machinelnfo for every licensed user. Upon receiving the userLicense 
request, the storefront will need to authenticate the user and determine the ClientGUID. 
It then checks the current ClientGUID against the registered machine list in the user's 
record. If the machine in question is on the list, the storefi-ont can make a normal 
subscription request to the license server with 

Subscription_SubscriptionGUID=UserGUID and an additional parameter, 
Subscription_ContentKey=userKey. It should be a rare circumstance, that the user would 
have a known ClientGUID and not have a license. . . We could flag such situations as 
potential fraud or hack. 

If the ClientGUID is not on the list but the number of current registered machines is less 
than the total number allowed, the storefront can add the ClientGUID to the list and 
increment the activation number and update the user account. It then makes a 
subscription license request to the license. If no more machines can be licensed to the 
user, the storefi-ont shall prompts the user to de-register a machine first and then come 
back try again. 

A storefront might choose to record a user specified Machine Name when they register a 
machine. They could then easily determine what machines they had registered by 
looking at their account status. 



4 Design Choices 



4.1 UserGUID. 

Currently the UserNamef xxx@vy.zz ) and/or userlD is in the user's record. A new 
UserGUID is needed to identify the userLicense in the local DB. The UserGUID and the 
UserName will also show up in the personalized content file header marking the 
associated user as the content owner. 

4.2 Encrypted userKey. 

The userKey shall be a 1 28-bit random AES key. It will be used to encrypt/decrypt the 
contentKey in the content license contained in the file Header. The userKey will be 
transferred to the license server encrypted with the server's public key in the same manor 
a regular ContentKey would be encrypted. The DRM license server will decrypt the 
userKey with the server's private key. 

4.3 embeddedContentLicense. 

The embeddedContentLicense in the content header shall have 3 parts: a CString named 
DRM_UserGUID with value in the 8-4-4-4-12 format, an IHXBuffer named 
DRM_UserName holding the login name, an IHXBuffer named DRM Userlnfo of size 
173. The DRM_UserInfo buffer shall hold a base64-encoded 128-byte binary structure: 

struct CEmbeddedContentLicense 
{ 

UCH AR m_^MD5Hash[ 1 6] ; 

int m_Version; 

UCH AR m_ContentKey [ 1 6] ; 

UCHAR m_reserved[ 128-1 6-4- 1 6] ; 

}; 

The m_MD5Hash shall not be encrypted. The rest of the structure shall be encrypted 
with the userKey. The current version number shall be 1 . The reserved space will be 
filled with random data. 

4.4 userLicense 

This userLicense is simply a subscription with a key. Subscription licenses shall have all 
necessary rights like the subscription to control the usage rights for all user contents. The 
key field shall hold the userKey, protected by the double-encryption when inserted into 
the license DB, When making userLicense request to the license server, the store fi-ont 
shall send a subscription request with Subscription_SubscriptionGUID=UserGUID and 
an additional parameter, Subscription_ContentKey=userKey. 

4.5 Machine De-activation Protocol 

A user is authorized to play userContent on up to N registered machines. We shall allow 
the user to change the set of machines that are registered as long as only N machines are 



registered at any one time. In order to accomplish this there must be a secure way to de- 
register a user machine upon a user request. 

The solution utilizes the existing revocation logic to accomplish this. Adding 
Right_RevokeLicense=l (and not sending the content key) to the userLicnese generation 
should create a revoked license. 

But revocation by itself is not enough. The storefront needs to receive a gameted 
acknowledgement after the revocation has been processed. This prevents someone from 
intercepting the revocation before it is inserted and "faking" de-registration of a machine. 

The user initiates the process on a licensed machine with a request to de-register their 
machine. The storefront shall first determine the ClientGUID from the DRM info. 

The store shall then check the user account's machine list for ClientGUID to ensure they 
have issued a license to the machine that is requesting revocation. It is an error case if 
they are trying to revoke a machine that has not had a license sent to it. . . But this error 
case is possible if there is a corrupted database or the database is deleted. The user would 
then go to "revoke" their machine but it the storefront would think it was a different 
machine (because of the different install ID.) 

To facilitate this feature we are going to add a generalized license insertion 
acknowledgement method. This will allow for acknowledgment of any license insertion 
not just a userLi cense revocation insertion. 

4.6 License insertion Acknowledgment Protocol 

This procedure can be used to receive notification that a license was successfully inserted 
into the client's machine. 

The storefront will needs to pick a random number as a challenge. NOTE: it is very 
important that this number is random otherwise users will be able to "spoof an insertion 
acknowledgement. 

The challenge should be stored in a list of outstanding acknowledgments along with any 
data associated with the transaction (e.g. the ClientGUID that needs to be deregistered in 
the case of userLicense deregistration) The storefront needs to then create a license 
request via the license server. This is a standard license request (revocation, license, 
subscription) except two additional rights are added to trigger the acknowledgement 
protocol: 

Right_lnsertAckID=[storefront challenge] 

Right_InsertAckURL=[url storefront is expecting an http response]. 

NOTE: we could just have a URL and respond to that url, leaving building the url with a 
parameter representing the unique random challenge to be the responsibility of the 
storefront. 



After the DRM client has successfully processed the insertion of the license into the 
secure database, it will check to see if there is an InsertAckURL and ID. If they exist, the 
client will then hurl to the storefront with the InsertAckID appended to the end of the 
InsertAckURL (InsertionAcknowledgement=[storefront challenge] 

The storefront can then check the pending acknowledgement list and proceed with the 
action that required acknowledgement of the license insertion. 

5 Task Estimates 

5.1 DRM Client: 5-Days 

Client code to handle embeddedContent Li cense, userLicense and ContentKey 
calculation, generate url for userLicense and embeddedContentLicense request, viewrighs 
change for userLicense, license insertion acknowledgement, PD userKey transfer. 

5.2 License Server: 2-Days 

Code to allow ContentKey for subscription license, generating embeddedContentLicense. 

5.3 Packager 1-Day 

Code to create the space holders in the content file header. The download manager on 
the client will replace the space holders with the embeddedContentLicense without 
writing the entire content file. The DRM_UserGUID cstring shall be zero-guid: 
00000000-0000-0000-0000-00000000000. The DRM_UserInfo buffer shall be 173-byte 
long with all zeros. The DRM_UserName buffer shall be 256-byte filled with zeros. We 
will also need an ULONG32 of 1 named DynamicDRMInfo to indicate that we have 
some DRM_ values. 

5.4) User Account Services. 2-3 Days. 

Code to generate UserGUID/userKey. Code to add and manage new user account filelds 
UserGUID, registered ClientGUID list, numberRegistered, numberAllowed. . . 

5.5) Store 

userLicense request formation, embeddedContentLicense request formation, userLicense 
de-acfivation management. 

5.6) Utility to Insert embeddedContentLicense. 2-Days. 

Used by the client's download manager to locate the space holders UserGUID and 
Userlnfo in the content file header and replace them with the real UserGUID and 
embeddedContentLicense. 



EXHIBIT D 



Subjectireplay attack on Orange protocol and solutions 
DaterFri, 1 Aug 2003 15:47:52 -0400 
From: Sheldon Fu <sfu(gtreaLcom> 

To:7osh Hug* <ihug@real.com>. Alain Hamel <ahamel @jeal . com>, Qiang Luo 
<qluo(S)jeal.com> 

CC:Adam Cappio <adamc(a).reaLcom> . Rahul Agarwal <rahul(a)jeaLcom> 

Josh pointed out that our current Orange protocol is vulnerable to 

replay attack somebody could record the • ActivateUser ' dropoff DB 

and later after the device is de-registered, resend the saved DB to the 
device to activate the device again without PC DRM knowing anything 
about it. 

The prevention of replay attack seems not an easy task for the device: 

1. Since device may not have clock/timer and we could use mass storage 
as communication channel, time-out check is out. 

2. Same as in the PC license insertion replay prevention; we could have 
PC generate a unique record ID (or DB ID) each time and let device 
remember is a list of say last '100' IDs. 

3. Alternatively, we could use a counter in DB header so that each time 
anybody writes to it, increases the counter and both PC and device 
rememebers the 'last seen counter'. This means that the dropoff DB has 
to be always there and can not be deleted at any time. 

Big problem: Both (2) and (3) have problem when a device is reset so we 
will forget the list or the 'last seen counter'. It is so easy to reset 
a device, this is really big problem. 

We could improve by (3) : 

4. Require that only the device could create the DB, and each time the 
device create a DB ( after reset, or not after reset) , it has to put a 
RANDOM number as the initial counter value. Big drawback is that it may 
be really tough for a device without any clock and persistence storage 
other than flash (like Palm) to generate a random number after reset. 

Anybody has a better idea? Or we should just spec (3) and (4) in Orange 
and let device developers to scratch their heads to come out a random 
number? For a lame (and 'fun' ;-) ) solution, they could ask the user to 
punch a button 20 times then measure the intervals between key events to 
come out a random niimber, each time a dropoff DB needs to be created. 



fxd 



EXHIBIT E 



Subject:Helix Device DRM.ppt 

DaterFri, 15 Aug 2003 16:29:23 -0700 
From: Josh Hug <ihug(a)jeal . com> 

TorRanah Edelin <ranah@listen.com> , Rahul Agarwal <rahul@realxom> , Jeff Ayars 
<ieffa(aireaLcom> , Adam Cappio <adamc(a)jeal . com> , Niranjan Nagar 
<niranian@listen.com> , Dave Williams <dave@listen.com> . Rye Brownrigg 
<rbrowmigg@real . com> . Evan Krasts <ekrasts@listen.com> 

Here is my first draft of my presentations for the Music Labels to help 
further the Rights discussions. 

Two presentations: 

1. ) The Music Experience w/ Helix DRM 

Explain user licensing, and present issues w/ CD burning & PD transfers 
from a usability perspective. 

2. ) Helix Device DRM 

Present our Device DRM. How it works, its security, and comparison to 
existing standards & technologies. 

TODO: 

Edit, and refine. 



I plan to work on it a little bit tomorrow morning, and then I will have a 
long flight on Sunday. Monday morning I will meet w/ Ranah for last minute 
adjustments, re-organization & customizations for different meetings. 

Thanks for any feedback and suggestions on organization and content. 



Josh 
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EXHIBIT F 



SubjectrUserGUID byte order fix CR 
Date:Tue, 30 Sep 2003 15:45:07 -0700 
Froin:Qiang Luo <qluo(a)reaLcQm> 

To: Sheldon Fu <sfli(5)jeaLcom>, Alain Hamel <ahamel(a)jeaLcom> 
CCrJosh Hug <i hug@real . com>, Adam Cappio <adamc@jeal , com> 



Please review the fix. Thanks, Qiang. 



Diff.txt: 

Index : trsrc/enf orce . cpp 



RCS file: /home/dormroom/basicdrm/ trsrc/enf orce . cpp, v 
retrieving revision 1.179 
diff -u -rl.l79 enforce. cpp 

trsrc/enf orce. cpp 30 Sep 2003 12:00:06 -0000 1.179 

+++ trsrc/enf orce. cpp 30 Sep 2003 22:43:01 -0000 
@@ -4530, 6 +4530, 16 @@ 

TR_DELETE{pTacRecord) ; 

} 

+void Tr_PackGUID(GUID* pGUID) 
+ { 

+ 111 don't have DwToNet and uuid stuff in tr so I'm just doing to 
do bswap for LITTLE_ENDIAN 

•fttifdef LITTLE-ENDIAN 

+ bswap4 (pGUID->Datal ) ; 

+ bswap2 {pGUID->Data2 ) ; 

+ bswap2 (pGUlD->Data3 ) ; 

+#endif 

+ } 
+ 

void Tr_SetupTransferBuf fer (void** params, int* theErr, UCHAR* 
pMachinelnfo) 

{ 

char pszDevicePublicKeyNaine[19] = 
{'D','e','v','i','c','e','R\'S','A','P','u','b','l','i','c','K','e',' 

y ,0}; 

@@ -5124,6 +5134,7 (a@ 

if (pUserGUIDBuf fer && totalUsersOnPD > 0 && *UserCount >= 
totalUsersOnPD) 

{ 



+ //Do not need to pack the QUID for output. It is already 

in net byte order. We just dump them to the caller 

Tr_memcpy (pUserGUIDBuf f er , pUsersOnPD, 
totalUsersOnPD*sizeof (GUID) ) ; 

} 

else if (totalUsersOnPD > 0 && (! pUserGUIDBuf fer || *UserCount 
< totalUsersOnPD) ) 

@@ -5155,6 +5166,8 @@ 

// coyp out the user GUlDs 

for ( i=0 ; i<totalUsersOnPC ; i++ ) 

{ 

+ // pack the GUID for output 

+ Tr_PackGUID( (GUID*) (pUsersOnPC+i*2 ) ) ; 

Tr_memcpy (pUserGUIDBuf fer+i, pUsersOnPC+i*2 , 

sizeof (GUID) ) ; 

} 

} 

@@ -5173,6 +5186,18 @@ 



} 

else 

{ 

+ // coyp out the user GUIDs 

+ if (l*theErr) 

+ { 

+ for (i=0; i<totalUsersOnPC; i++) 

+ { 

+ Tr_DecrementRight ( (char*) (pUserGUIDBuf fer+i) , NULL, 

pszTransferToPD, sizeof (pszTransferToPD) , theErr, pMachineInf o) ; 

+ // pack the GUID for device messages and output 

+ Tr_PackGUID( (GUID*) (pUsersOnPC+i*2 ) ) ; 

+ Tr_memcpy (pUserGUIDBuf fer+i , pUsersOnPC+i *2 , 

sizeof (GUID) ) ; 

+ } 
+ } 
+ 

TR_MALLOC {&pSessionKey, 16 ) ; 



GenerateRandoitiBuf fer (pSessionKey, 16, NULL, pMachineInf o, 

theErr) ; 

// form messages out 
@@ -5193,15 +5218,6 @(a 

OrangePackMessages (pMessageOut , *pMsgOutSize, theErr) ; 

} 

#endif 

// coyp out the user GUIDs 

if (]*theErr) 

{ 

for (1=0; i<totalUsersOnPC; i++) 
{ 

Tr_memcpy(pUserGUIDBuffer+i, pUsersOnPC+i*2, 

sizeof (QUID) ) ; 

Tr_DecrementRight { (char*) (pUserGUIDBuf fer+i) , NULL, 
pszTransferToPD, sizeof (pszTransferToPD) , theErr, pMachinelnfo) ; 

} 

} 

} 

*UserCount = totalUsersOnPC; 

} 



EXHIBIT G 



Subject:RE: [Fwd: Machine Reg/Dereg Issues] 
Date:Wed, 08 Oct 2003 14:30:35 -0700 
Froiii:Qiang Luo <qluo(a)jeaLcom> 

To: Alain Hamel <ahamel@reaLcom> , Josh Hug <ihug@real.com> 
CCrAdam Cappio <adamc@real , com> 
References: <5. 1 .0. 1 4.2.2003 1 008 1 03838.02fdeb60@mailone.reaLcom> 



Al, 

Please review the fix. 

Adam uses embedded player to play the license file and everything works fine. 

Listen uses jscript and ierpplug to load the core to call 
RMADRMLicenseManager : :AddLicense directly. There is no player made 
available from the pContext . nPlayerCount = pEngine->GetPlayerCount ( ) 
returns 0 . 

I tested using both IE and RealOne against both Adam's and Listen's 
storefront. All works. However, there is one problem: when I use RealOne 
player to de-register machine from Listen, it hurl to their page in a new 
window. It works correctly if I use IE. I have set the target frame to 
"_self". What else I can do to force the page in the same window? 

Thanks , 

Qiang 

At 11:23 AM 10/8/2003 -0700, Alain Hamel wrote: 

>Qiang, 
> 

>so nPlayerCount = 0 after executing the line: 
> 

> > nPlayerCount = pEngine->GetPlayerCount ( ) ; 

> 

>Wow. 
> 

>That would mean that a player has never been created. Interesting. I just 

>looked through the embedgui code, and then the rpplmgr and 

>then the rprmapl code and it has changed quite a bit since I last looked 

>at it. I think it's possible that if there is no url within 

>the embed tag (object tag) then no player is created. 

> 

>And if no player is created go nuts. Call CreatePlayer . And wow are you 
>lucky calling createplayer calls _initalize so you should be 
>good to go. 
> 

> Original Message 

>From: Qiang Luo [ mailto : qluo@real . com ] 
>Sent: Wednesday, October 08, 2003 9:58 AM 
>To: Josh Hug; Alain Hamel 
>Cc : Adam Cappio 

>Subject: Re: [Fwd: Machine Reg/Dereg Issues] 
> 



>Josh & Al, 
> 

>The insertion ack works against Adam's store. The pPlayer is from (see the 
>attached code) 

>m_pContext->QueryInterface (IID_IRMAPlayer, (void**) ^pPlayer) ; 
> 

>However, when using listen's store, get player from all three 
>methods (passed to us, from pContext, from pEngian) fails. 
> 

>One fix that I can think of is when QI player attempts all fail, we will 
>create a player from pEngine and then hyper navigate via the new 
>player. Any suggestions? 
> 

>Thanks , 
> 

>Qiang 
> 

> 

> >Date: Wed, 08 Oct 2003 10:37:22 -0700 

> >To: Matt Faso <mf aso@real , com> 

> >From: Qiang Luo <qluo@real . com> 

> >Subject: Re: [Fwd: Machine Reg/Dereg Issues] 

> >Cc: Josh Hug < jhug@real . com> , Brad Pitzel <bpitzel(greal .com> , 

> > jchasen(ireal .com , Anuj Khandelwal <akhandelwal@real , com> 

> > 

> >Matt, 

> > 

> >There is indeed a DRM bug. DRM attempts to send the ack but failed to get 

> >a HXPlayer to kick off the hurl. I will file a bug and fix it. Could you 

> >try to use the silent option for now to see whether the silent method 

> >works? The syntax, before urlbase64, is 

> >Silent : http :/ 7172 .23 . 104 . 195/mstore/deregister .php?deregister= " 

> > 

> >Thanks, 

> > 

> >Qiang 



Diff . txt: 



Index : revcli . cpp 



RCS file: /home/dormroom/basicdrm/revcli.cpp,v 
retrieving revision 1.5 
diff -u -rl.5 revcli. cpp 

revcli. cpp 21 Aug 2003 13:04:29 -0000 1.5 

+++ revcli. cpp 8 Oct 2003 21:22:35 -0000 
@@ -95,24 +95,31 @@ 

ret = m_LastError; 

} 

+ // QI hypernavigate directly 
+ IRMAHyperNavigate2* pHyper2 = NULL; 
+ if (SUCCEEDED (ret) && !m_bSilent) 
+ { 

+ m_pContext->QueryInterf ace ( IID_IRMAHyperNavigate2 , 
(void**)&pHyper2) ; 

+ } 

// player for hypernavigate 
IRMAPlayer* pPlayer = NULL; 
+ IRMAPlayer* pNewPlayer = NULL; 

if (SUCCEEDED (ret) && !m_bSilent && pRMPlayer) 

+ if (SUCCEEDED (ret) && !m_bSilent && !pHyper2 && pRMPlayer) 
{ 

// passed to us 
pPlayer = pRMPlayer; 
pPlayer->AddRef ( ) ; 
} 

if (SUCCEEDED (ret) && !m_bSilent && !pPlayer) 



+ if (SUCCEEDED (ret) && !m_bSilent && !pHyper2 IpPlayer) 
{ 

/ / Ql from pContext 

m_pCont ext- >QueryInt er f ace ( I ID_IRMAPlayer , (void* * ) &pPlayer ) 
} 

if (SUCCEEDED (ret) && !m_bSilent && IpPlayer) 
+ if (SUCCEEDED (ret) && !in_bSilent && !pHyper2 && IpPlayer) 
{ 

// player from pEngine 
BOOL bFound = FALSE; 
@@ -160,15 +167,24 @@ 
} 

} 

// hypernavigate 

if (SUCCEEDED (ret) && !m_bSilent && pPlayer) 

+ if (SUCCEEDED (ret) && !m_bSilent && !pHyper2 && IpPlayer && 
pEngine ) 

+ { 

+ //we are out of luck! we have to create our player from 
pEngine . . . 

+ pEngine->CreatePlayer (pNewPlayer) ; 
+ pPlayer = pNewPlayer; 

+ } 
+ 

•f if (SUCCEEDED (ret) && !m_bSilent && !pHyper2 pPlayer) 
+ { 

+ pPlayer->Querylnterf ace ( IID_IRMAHyperNavigate2 , 
(void* * ) &pHyper2 ) ; 

+ } 
+ 

+ if (SUCCEEDED (ret) && !m_bSilent && pHyper2) 
{ 

IRMAHyperNavigate2* pHyper2 = NULL; 
IRMACommonClassFactory* pCCF = NULL; 



IRMAValues* pRequest = NULL; 



pPlayer->QueryInterf ace { IID_IRMAHyperNavigate2 , 
(void* * ) £cpHyper 2 ) ; 

pPlayer->QueryInterf ace ( IID__IRMACoinmonClassFactory , 
(void**)&pCCF) ; 

+ m_pContext->QueryInterface (IID_IRMACoininonClassFactory, 
(void**)&pCCF) ; 

if (pCCF && pHyper2) 
{ 

m -185,13 +201,18 @@ 
pRequest) ; 

} 

PN_RELEASE ( pHyper 2 ) ; 
PN„RELEASE (pRequest ) ; 
PN_RELEASE(pCCF) ; 
} 

+ if (pNewPlayer) 
+ { 

+ pEngine->ClosePlayer (pNewPlayer) ; 

+ } 
+ 

PN_RELEASE(pEngine) ; 
PN„RELEASE(pPlayer) ; 
+ PN„RELEASE (pHyper2 ) ; 

return ret; 

} 



code . txt : 



PN^RESULT 

RevokeClient :: Initialize (const char* pRevokeURL, lUnknown* pContext, 
RevokeClientResponse* pResponse, IRMAPlayer* pRMPlayer, BOOL bSilent) 

{ 

const char pszSilent[8] = {'S','i','l','e','n','t',':',0}; 
const char pszSelf [6] = {'_\*s','e^*l','f',0}; 
const char* pURL = NULL; 
PN_RESULT ret = PNR_OK; 

m_j3Context = pContext; 
ni_pContext->AddRef ( ) ; 

// set mode 

m_bSilent = bSilent; 

pURL = pRevokeURL; 

if (strstr (pRevokeURL, pszSilent) ) 

{ 

pURL += 7; 
m_bSilent = TRUE; 

} 

m_pRevokeURL = : :new_string (pURL) ; 
m_pResponse = pResponse; 

// pEngine 

IRMAC li en t Engine* pEngine = NULL; 

ret = m_pContext->QueryInterface (IID_IRMAClientEngine, (void**) 
&pEngine) ; 

// silent http request 

if (SUCCEEDED (ret) && m_bSilent) 

{ 



pEngine->CreatePlayer {m_pNewPlayer ) ; 



if (pRMPlayer) 
{ 

lUnknown* pCtxt = NULL; 
pRMPlayer->GetClientContext (pCtxt) ; 
m_j)NewPlayer->SetClientContext (pCtxt) ; 
PN_RELEASE(pCtxt) ; 

} 

m_pNewPlayer->AddAdviseSink( (IRMAClientAdviseSink*) this) ; 
IRMAErrorSinkControl* pSinkCtl = NULL; 

m__pNewPlayer->QueryInterf ace ( IID_lRMAErrorSinkControl , (void* 

ScpSinkCtl) ; 

pSinkCtl->AddErrorSink( (IRMAErrorSink*) this, PNLOG_EMERG, 
PNLOG_ERR) ; 

pSinkCtl->Release( ) ; 

m_LastError = m_pNewPlayer->OpenURL (m_pRevokeURL) ; 

if (m^LastError == PNR_OK) 
{ 

m__LastError = m_pNewPlayer->Begin ( ) ; 

} 

ret = m_LastError; 

} 

// QI hypernavigate directly 
IRMAHyperNavigate2* pHyper2 = NULL; 
if (SUCCEEDED (ret) && Im_bSilent) 
{ 

in_pContext->QueryInterf ace ( IID_IRMAHyperNavigate2 , 
(void** ) &pHyper2 ) ; 

} 



// player for hypernavigate 
IRMAPlayer* pPlayer = NULL; 
IRMAPlayer* pNewPlayer = NULL; 

if (SUCCEEDED (ret) && !in_bSilent && !pHyper2 && pRMPlayer) 
{ 

// passed to us 
pPlayer = pRMPlayer; 
pPlayer->AddRef ( ) ; 

} 

if (SUCCEEDED (ret) && !m_bSilent && !pHyper2 && IpPlayer) 
{ 

// QI from pContext 

m_pContext->QueryInterface (IID_IRMAPlayer, (void**) &pPlayer) ; 

} 

if (SUCCEEDED (ret) && !m_bSilent && !pHyper2 && IpPlayer) 
{ 

// player from pEngine 
BOOL bFound = FALSE; 
UINT16 nPlayerCount = 0; 
UINT16 sourcecount = 0; 
UINT16 streamcount = 0; 

nPlayerCount = pEngine->GetPlayerCount ( ) ; 

for (int i = 0; i < nPlayerCount && ! bFound; i++) 
{ 

lUnknovm* pUnk = NULL; 
pEngine->GetPlayer (i, pUnk) ; 
if (punk) 
{ 

PN__RELEASE (pPlayer) ; 



pUnk->Querylnterf ace {IID_IRMAPlayer, (void** ) &:pPlayer) 

if (pPlayer) 

{ 

sourcecount = pPlayer->GetSourceCount ( ) ; 

for (int j = 0; j < sourcecount && ibFound; j++) 

{ 

IRMAStreamSource* pSource = NULL; 
lUnknown* pUnk2 = NULL; 
pPlayer->GetSource ( j , pUnk2 ) ; 
if {pUnk2) 
{ 

pUnk2->QueryInterface (IID^IRMAStreamSource, 

(void**)&pSource) ; 

if (pSource) 
{ 

streamcount = pSource->GetStreamCount ( ) ; 

if (streamcount) 

{ 

// active player 
bFound = TRUE; 

} 

} 

} 

PN_RELEASE (pSource) ; 
PN_RELEASE(pUnk2) ; 

} 

} 

} 

PN_RELEASE(pUnk) ; 

} 

} 



if (SUCCEEDED (ret) && !m_bSilent && !pHyper2 && IpPlayer && 
pEngine) 

{ 



//we are out of luck! we have to create our player from 
pEngine . . . 

pEngine->CreatePlayer (pNewPlayer ) ; 

pPlayer = pNewPlayer; 

} 

if (SUCCEEDED (ret) && !m_bSilent && !pHyper2 pPlayer) 
{ 

pPlayer->QueryInterf ace ( IID_IRMAHyperNavigate2 , 
( void** ) &pHyper2 ) ; 

} 

if (SUCCEEDED (ret) && !m_bSilent && pHyper2) 
{ 

IRMACommonClassFactory* pCCF = NULL; 
IRMAValues* pRequest = NULL; 

m_pContext-'>QueryInterf ace ( lID_IRMACoitiinonClassFactory , 
(void**)&pCCF) ; 

if (pCCF && pHyper2) 
{ 

pCCF->CreateInstance ( IID_IRMAValues , (void* * ) &pRequest ) ; 

} 

if (pHyper2 && m^RevokeURL && pRequest) 
{ 

pRequest->SetPropertyULONG32 ( "IsLicenseAcknowledgement" , 
ret = pHyper2->Execute ( (const char*)m_pRevokeURL, 

pszSelf , 

NULL, 

NULL, 

pRequest) ; 

} 



PN_RELEASE (pRequest) ; 



PN_RELEASE(pCCF) ; 

} 

if (pNewPlayer) 
{ 

pEngine->ClosePlayer (pNewPlayer) 

} 

PN„RELEASE{pEngine) ; 
PN_RELEASE{pPlayer) ; 
PN„RELEASE(pHyper2) ; 



return ret; 



